mirror of
https://github.com/PR0M3TH3AN/SeedPass.git
synced 2026-10-28 00:12:04 +00:00
thePR0M3TH3ANandClaude Opus 5
44935219d1
Audits every security-sensitive random value in src/ against a Coldcard-class checklist: where each bit of unpredictability originates, whether that source is present in the production artifact, and what happens when it fails. No predictable-fallback defect. Master seed, AES-GCM nonces, TOTP secrets, Argon2 salts, API tokens and agent leases all come from os.urandom or secrets and fail closed. The random module is not imported anywhere in non-test source. The findings are about how much entropy survives the deterministic derivation in core/password_generation.py, not about whether it should be deterministic. Chief among them: _balance_distribution forces exactly L/4 of each character class into every password, verified 300/300 at five lengths. That costs 5.7-11.5 bits and, more materially, fingerprints the generator -- a password with exactly a quarter of each class is a strong signal it came from SeedPass. Records the compatibility constraint that governs all of it: passwords are never stored, they are re-derived on demand, and entries carried no algorithm version. Any in-place change to generate_password was therefore a data-loss event, not an improvement. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]> Claude-Session: https://claude.ai/code/session_01HtNMsKzzFTPURemX7tT19u
SeedPass Docs
This directory contains SeedPass project documentation.
Start Here
dev_control_center.md(single source to decide what to do next)
Agent and Autonomy Docs
agent_autonomy_security_plan.mdpolicy_as_code.mdsync_conflict_contract.md
Core Security Docs
security_readiness_checklist.mdthreat_model.mdcrypto_key_management_review.mdsecret_handling_local_exposure_review.mdauth_lock_unlock_access_review.mdsupply_chain_release_integrity.mdrelease_verification_runbook.mdrelease_protection_policy.mdoperational_runbooks.mdstaged_rollout_runbook.md
Architecture and Product Docs
ARCHITECTURE.mdSPEC.mdtypescript_web_extension_port_plan.mdentry_types.mdentry_graph.mdtui_v3_plan.md(active roadmap for scratch rebuild)tui_v2_plan.md(legacy logic reference)tui_v2_parity_checklist.mdtui_v2_parity_backlog.mdtui_v2_legacy_parity_matrix.mdtui_v2_ui_refresh_plan.mdsemantic_vector_index_plan.mdtui_v2_cutover_decision.mdtui_v2_large_vault_validation.mdsecurity.mdnostr_setup.mdnostr_namespace_reset.mdpackaging.md
QA and Testing Docs
TEST_INVENTORY.md(central index of all tests and runners)agent_testing_roadmap.mdai_agent_tui_testing.mdagent_test_format.mdinstaller_testing.mdkb_scale_validation.mdci-health-2026-02-19.mdagent-handoffs/README.md
Discoverability Commands
seedpass --helpseedpassseedpass tui2seedpass --legacy-tuiseedpass legacyseedpass <group> --helpseedpass tui2 --helpseedpass tui2 --checkseedpass capabilities --format jsonseedpass agent bootstrap-context